Hi,

just a quick status update after about a day of investigations and work on it:

* At about 16:30 UTC we have lowered down the spam score neccessary for the mail to be rejected. This has decreased the number of spams passing through to about one third. So at least some progress for the time being. We couldn't decrease the threshold further though as it could affect some regular emails.
* We were testing various further filterings via matching of various things (since some used checkpoints in subjects varied during the time), because we didn't want to cut off the entire @qq.com. So the frequency of spams randomly oscillated.
* At about 23:00 UTC we have tested the solution which seemed to finally catch everything properly as desired. So now there should be no such spams passing through, however, if senders will change the structure of the subject, mails will pop up again, although - due to the first point - still in lower frequency.
* Should that happen, we are considering rejecting all mails from @qq.com (or <numbers>@qq.com) sent to any *-owner@lists.wikimedia.org address for the time being until narrower solution is set.

(We == Keith & myself.)

Please let us know if you're experiencing any further spams of this type since now.


Kind regards


Danny B.